Privacy Policy

Introduction

This Privacy Policy explains what mini365admin ("the app," "we," "our") handles on your device, what it sends to Microsoft on your behalf, and what we — ConnectIT Technologies — do and do not collect. By using the app you agree to this policy.

Information the App Handles

1. Sign-in and Tokens

You sign in with your Microsoft work or school account through Microsoft's own sign-in page, using the Microsoft Authentication Library (MSAL). Your password is entered on Microsoft's page and is never seen or stored by mini365admin.

• MSAL stores the resulting access and refresh tokens in the iOS/macOS Keychain or Android's protected app storage, encrypted by the operating system.
• Tokens are sent only to Microsoft (login.microsoftonline.com and graph.microsoft.com).
• Signing out removes the account and its tokens from the app.

2. Your Organization's Directory and Device Data

To let you administer your tenant, the app reads and, when you choose an action, changes data through Microsoft Graph. Depending on the permissions your organization granted and your own admin roles, this can include:

• User accounts and profile attributes, group memberships, licenses, and sign-in methods
• Sign-in logs, directory audit logs, and authentication-method registration reports
• Intune managed devices, their compliance status and primary user
• Device secrets you explicitly reveal: BitLocker recovery keys, Windows LAPS local administrator passwords, and newly issued Temporary Access Passes or reset passwords

This data is fetched live and held in memory while you use it. It is not uploaded to ConnectIT Technologies and is not written to disk by the app, apart from the minimal session state described below.

3. Administrative Actions

When you perform an action — for example disabling an account, revoking sessions, resetting a password, issuing a Temporary Access Pass, removing a sign-in method, changing group membership or licenses, or sending a remote action to a device — the request goes directly from your device to Microsoft Graph. Microsoft Entra ID and Intune audit logs remain the system of record for these changes.

4. Settings Stored on Your Device

The app stores a small number of preferences locally, such as which sections appear in your tab bar. A "recently viewed" list of users and devices is kept in memory only and cleared when you sign out or close the app.

5. Diagnostics

The app contains no crash-reporting or analytics SDK. If you choose to share diagnostics with Apple or Google through your device settings, those platforms may provide us with aggregated, anonymized crash reports (device model, OS version, app version). These reports do not contain your organization's data, account details or tokens.

How Information Is Used

• Sign you in to your own Microsoft tenant
• Display directory, device and log information you request
• Perform the administrative actions you initiate
• Explain when an action is unavailable because of your role, licensing or consent

Data Sharing and Disclosure

The app communicates only with Microsoft's identity platform and Microsoft Graph, as directed by you. Microsoft's handling of your organization's data is governed by your organization's agreement with Microsoft and the Microsoft Privacy Statement.

We Do NOT Share Data With:

• Advertisers or advertising networks
• Data brokers or analytics providers
• Any third party for any purpose

We do not sell data and we do not track you across apps or websites. We have no access to your organization's data, so there is nothing for us to share.

Security

• All network traffic uses HTTPS (TLS) directly to Microsoft endpoints
• Tokens are protected by the operating system's secure storage
• The app requests only delegated permissions: it can never do more than the signed-in administrator is allowed to do in your tenant
• Destructive actions such as device wipe require typing a confirmation phrase

Data Retention

• Tokens: kept until you sign out, the session expires, your organization revokes it, or you uninstall the app
• Organization data: in memory while you use it only
• Preferences: on your device until you uninstall the app

Your Choices and Rights

You can sign out at any time. Your organization's administrators can revoke the app's access in Microsoft Entra ID (Enterprise applications) or revoke your sessions. Requests to access, correct or delete directory data are handled by your organization through Microsoft 365, since ConnectIT Technologies holds none of it.

Children's Privacy

mini365admin is a professional tool for IT administrators. It is not directed at children and we do not knowingly collect information from children.

Trademarks

Microsoft, Microsoft 365, Microsoft Entra, Intune and BitLocker are trademarks of the Microsoft group of companies. mini365admin is an independent app and is not affiliated with, sponsored by or endorsed by Microsoft.

Changes to This Policy

We may update this policy as the app gains features. The "Last Updated" date above shows the latest revision. Continued use after an update means you accept the revised policy.